Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: WHOSy3k/oqESrXYjbVdyX3fPof5GF1pWpPOzalFGEWM=
Subject key identifier: BF:FE:0C:D9:80:4B:E3:75:D0:01:9A:D3:90:E1:ED:DB:38:FF:8D:FC
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01984709408FE4DA5137D45460577E795E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 133C
Signing time: Sat 26 Jul 2025 14:00:45 +0000
Manifest this update: Sat 26 Jul 2025 14:00:45 +0000
Manifest next update: Sun 27 Jul 2025 14:00:45 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: z+c+KQwPqN4xZI5lIifiwkuug98S+f2waCZY/JuQ5Rg=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:40:8f:e4:da:51:37:d4:54:60:57:7e:79:5e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Jul 26 14:00:45 2025 GMT
Not After : Jul 27 14:00:45 2025 GMT
Subject: CN=bffe0cd9804be375d0019ad390e1eddb38ff8dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:ba:64:39:06:6c:6b:a8:91:3e:15:37:2c:
24:14:eb:8f:40:e6:84:0f:34:8f:52:fa:07:10:d3:
74:9f:ce:f8:e6:24:f6:38:fd:b7:e4:74:c2:59:47:
76:fe:17:fc:e8:b4:82:5c:0f:ef:5c:0e:88:b8:b8:
16:a9:16:48:2a:1b:ac:60:12:cd:5e:e1:ee:55:e7:
12:ed:06:a1:b3:c6:c6:06:dc:33:77:c0:35:8e:61:
2d:0b:e3:fa:3e:d7:fc:87:e1:f1:c5:11:97:ea:2d:
2c:f1:17:8a:25:26:1a:e3:46:b7:41:f5:20:8b:52:
a3:29:e9:ad:61:4b:4e:a6:b1:d5:9c:8c:6a:b2:c4:
1f:98:5c:79:d5:2a:a5:67:be:da:b7:75:20:8e:66:
17:e4:ee:9b:eb:6d:f8:c1:83:9d:cf:0a:15:9e:fe:
73:51:c7:a2:a5:ec:30:d4:80:65:8e:9f:dc:a6:25:
68:8f:a0:92:39:01:8b:e7:65:ab:21:8e:4f:cf:5c:
72:fb:dc:2d:87:32:83:7d:75:66:55:7f:79:d5:88:
b8:76:7d:76:5b:55:8f:59:fc:a7:46:67:62:db:0d:
b0:35:9f:66:b5:7a:1f:02:aa:d4:1e:d7:f9:69:a9:
9e:c5:f8:a0:d4:08:cb:2d:57:8f:8e:ae:02:4b:13:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:0C:D9:80:4B:E3:75:D0:01:9A:D3:90:E1:ED:DB:38:FF:8D:FC
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:17:9d:ca:c3:99:36:2f:64:c1:ed:d5:de:a7:af:d4:83:
d1:71:5e:20:57:17:6a:9b:26:79:c9:a2:de:07:4b:12:77:4d:
5f:c0:1a:c8:98:ee:1d:08:62:53:a6:ac:c8:cb:92:73:47:4f:
a0:96:84:8c:b1:1f:29:fe:b8:a5:3a:59:da:60:3b:e1:e9:92:
8a:0d:7f:11:72:73:f6:57:9c:b7:3a:f1:67:e4:51:14:93:29:
ff:37:22:31:a4:f8:ca:d6:50:f7:56:b4:c8:c1:f0:2e:63:e8:
f7:1c:5f:03:64:7c:cc:82:5d:e3:4e:28:df:4b:59:e3:4d:bd:
dc:b0:0d:9d:6e:46:1e:24:1b:dc:b1:7b:e2:ea:d4:5d:65:08:
09:a6:c3:94:18:bc:4e:52:4b:d1:85:7a:00:8c:27:0f:f6:cd:
8b:db:4e:11:19:20:72:26:fb:6c:30:19:f3:34:a9:1c:cc:12:
5a:9d:55:d4:11:80:86:a4:3c:c1:bc:30:64:bd:99:6a:21:4d:
a3:c7:c2:76:97:c6:2e:99:38:54:1c:50:c6:77:99:10:c0:48:
27:34:e8:33:b4:ed:e1:b0:85:71:19:26:20:21:ac:97:2d:f7:
bd:ce:40:d6:b8:f4:7b:3f:4e:66:fd:9a:7e:74:dc:09:d2:9a:
04:58:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:57 2025 by rpki-client